$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft File: advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json) Hash identifier: pMNU606yDQ5NRGffJ25hN39Xq0TAcpYohRXkooKszRQ= Subject key identifier: 44:73:A8:96:84:FA:7A:30:F3:C9:D3:C5:64:6C:43:58:7F:E4:24:E0 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019A172A4336679CDC58B92C252EBE356B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft Manifest number: 0488 Signing time: Fri 24 Oct 2025 17:00:36 +0000 Manifest this update: Fri 24 Oct 2025 17:00:36 +0000 Manifest next update: Sat 25 Oct 2025 17:00:36 +0000 Files and hashes: 1: 0PY44eNhRhwBAlEI8CW_7e75Yh4.roa (hash: DGCK7O0NcOT707/3o5K5VhDn6NVZN3M0FrdHm/a2UuU=) 2: 356qaAYQpDV5m2Riq8A1jSL_myc.roa (hash: J+LALyAXIHBq3+bBLiTSfwMeZdohnuBRZTHDVc6I9II=) 3: 50QBDzaaWAWirDv35AlJpGDh488.roa (hash: U9zp626nKKun30mCMXd5d52t9o6/HWZq00zHsZoBgiw=) 4: 5vI96mdACUYtbrBj1hpxS2th8SU.roa (hash: +D5F/vhkd6kDEoeI5nvUAAqsYy/qD8SkAXkJnFT0scM=) 5: 7md33wTGzdjzkpdm2YWPb96DeAE.roa (hash: XTg5R+tAMtHvJrOV1S/6jDI/yrBqzGpGjvAacgtOwFs=) 6: FNzx-AXDWYQXweTOw5GW8wLwA8Y.roa (hash: pI2apPSLr8xZ4eK8bjFcepwZqTx3hkzwJixceRtYmFQ=) 7: GSKX6t5lJ0i4qvCaHVaNJW2pF_U.roa (hash: p6a7klkfw04BCewW69YXx9rhT4r3ImOgOYr/lCdS37U=) 8: H6mPTB9-HpWPD2VkpbUTBtxyeqs.roa (hash: alhkfmIs5h48famyJbrNqD1LroO26bFxdaO2RO80rB0=) 9: Nx_LlHukO6YVT2BEBxBXRcLN_po.roa (hash: KT5voOJbr5oTRoQ5gvpwOS1NktXBmDgt7n2ImgfHYoM=) 10: RNey77PyYZ7q5aSaC4PKivPQUp4.roa (hash: nbnaDHAsWvelX6heHPYA3AE04SRORSzM43r0uMU5XGU=) 11: SEZX5fUhJhW7k1qXvEVAYDNb0bI.roa (hash: Gny5FCnUJO7mwZfbJF+nB2yfn78HUv4IFWcliadewNg=) 12: Zpu7668f8h1Q8AZ7CSnaYvkKBBk.roa (hash: gAGb1Y5AmI4FXfL962Kn9U3vKesk+PWP9SX12mcYBwQ=) 13: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: RvX4D2+irMusSI4bnZ9tRZ/SHoMtKTj0qR39/ShbAgs=) 14: ex4DOvPDqM0MHcX4072QFI1J-dg.roa (hash: hb9HDZK32mlayqYDJJsNMIHQYLFqVQuuMQ9e8DihaX0=) 15: ixSljlpAv7VqFqZBManiWIU_IIY.roa (hash: S7kK0yaWZD9cO4dIzOpKGjzXHLiqqB9lAeIuZmQigdM=) 16: kQzzX0DQ2YyMSTJ5yFl3v95LkDI.roa (hash: cRZ9xm6BVrOYd9CySCPL4z+78bjkaTOH3OZ66vuPhhQ=) 17: lNQAITIC5PmIJYf58oFmM4_t7ZI.roa (hash: EoC37uqzi538UDD96xogxI48SXL4t+AtWBAP3kmAc9E=) 18: nzL5rU21d1PlGGMQdcFTW627B-Y.roa (hash: 9reJY4cgowCz0eQpIjwulCKKRQRpF5bMWpAhQfAMQg8=) 19: qtSFhSVXD3loe4iYCp27H6WqPO8.roa (hash: dM5n2vL+0Slh2GrDt9ahN7jhYGcuB7d0O5MXI/IkDvE=) 20: rhCoOQ0b3LIFh_pzGCx8mEpQSCU.roa (hash: l8U8iyph5EKJjwuIU1Ch+SfAGqICGB1ZppWFQqcO0KU=) 21: uPVNzfaFCEVH8pgEcujrS2hKdGY.roa (hash: 624lPGVpaWFoqr9oTQxsUT+zutBPV/3xF9eLcAlFX3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Oct 2025 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:17:2a:43:36:67:9c:dc:58:b9:2c:25:2e:be:35:6b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Oct 24 17:00:36 2025 GMT Not After : Oct 25 17:00:36 2025 GMT Subject: CN=4473a89684fa7a30f3c9d3c5646c43587fe424e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e2:e9:19:95:eb:8a:a9:40:c0:0b:b6:b6:22: 76:b3:5d:fe:21:34:e8:68:f8:39:56:e3:81:80:a0: 52:b5:51:66:61:13:cf:42:de:ba:1d:89:7a:32:40: 16:80:9b:d5:ca:f8:23:fe:d3:c2:8a:64:0e:3f:00: d7:35:a3:b7:53:ca:0e:75:8e:a4:ac:50:cc:bc:c9: 97:ee:e7:e7:77:12:aa:58:4b:dd:b5:5d:2c:a4:a9: 5c:cc:92:7e:2b:d3:13:25:5a:88:88:20:a8:d8:be: c2:ab:0d:75:a3:6e:b9:96:2d:25:40:57:86:2a:c8: ad:4a:1d:4e:e5:ab:1d:cb:69:85:33:e5:4b:08:9f: d5:9b:e9:27:cb:f1:59:b6:53:48:a0:d0:a7:52:f6: 85:2d:64:6c:55:09:2b:eb:ae:f0:fc:6a:5a:ec:56: b1:2e:f5:24:43:02:62:51:ec:6f:c5:c1:d6:87:e7: a8:90:0c:f0:11:fb:6c:08:77:90:30:be:04:c7:e7: 5e:54:28:c9:82:6b:f1:ef:3b:af:ea:d5:43:7f:30: f4:60:1e:ef:e2:fd:1e:d3:51:4e:05:b9:53:0f:45: b2:18:6d:88:19:9f:48:51:2c:84:36:09:66:0e:12: 7d:ca:2c:03:9d:5c:10:68:37:90:b8:95:50:72:b8: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:73:A8:96:84:FA:7A:30:F3:C9:D3:C5:64:6C:43:58:7F:E4:24:E0 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:87:17:a3:c1:ed:d5:7b:58:77:1e:d0:7d:b6:ab:a7:65:95: 40:a0:90:43:33:ec:04:0e:53:5e:ea:43:36:20:ce:6e:11:2b: a1:62:72:f1:55:7e:85:65:2a:dc:5e:50:26:8f:ea:39:5c:fe: b8:72:0d:a5:bc:91:bc:bb:e9:e3:c3:ae:c2:cd:54:19:19:a4: e1:6f:55:21:bc:d5:02:1c:7d:0c:74:56:d0:e1:72:64:bd:4e: e6:04:95:a2:a7:0c:6f:85:fc:e9:0e:cb:50:4b:6f:10:ce:4f: c7:11:f3:fc:d6:ae:4d:ac:d8:df:99:8b:8d:a6:10:e4:69:e0: 1e:c8:96:db:49:c8:28:de:2a:a2:0c:61:31:ff:0c:3c:f7:58: ea:73:82:33:9d:80:0f:74:17:ec:e4:82:7f:71:84:13:a4:68: 44:3d:2e:61:f1:84:6a:cc:de:fb:0d:d4:10:8a:04:d9:13:24: 46:47:c6:bc:7c:3f:87:dd:d5:46:80:1d:1c:57:77:49:03:f4: 8f:94:58:c9:a6:96:1c:bb:67:db:09:3d:52:f4:87:d1:92:4a: 29:c1:ac:1c:4d:5f:75:90:5c:0b:dd:ed:f3:20:7c:f9:bb:e9: 83:4e:ce:94:ca:73:a5:22:7f:4d:26:0c:62:b0:bd:6c:f7:e8: c7:55:33:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZoXKkM2Z5zcWLksJS6+NWuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjUxMDI0MTcwMDM2WhcNMjUxMDI1MTcwMDM2WjAzMTEwLwYDVQQD Eyg0NDczYTg5Njg0ZmE3YTMwZjNjOWQzYzU2NDZjNDM1ODdmZTQyNGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOLpGZXriqlAwAu2tiJ2s13+ITTo aPg5VuOBgKBStVFmYRPPQt66HYl6MkAWgJvVyvgj/tPCimQOPwDXNaO3U8oOdY6k rFDMvMmX7ufndxKqWEvdtV0spKlczJJ+K9MTJVqIiCCo2L7Cqw11o265li0lQFeG KsitSh1O5asdy2mFM+VLCJ/Vm+kny/FZtlNIoNCnUvaFLWRsVQkr667w/Gpa7Fax LvUkQwJiUexvxcHWh+eokAzwEftsCHeQML4Ex+deVCjJgmvx7zuv6tVDfzD0YB7v 4v0e01FOBblTD0WyGG2IGZ9IUSyENglmDhJ9yiwDnVwQaDeQuJVQcrh+gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERzqJaE+now88nTxWRsQ1h/5CTgMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYcXo8Ht 1XtYdx7Qfbarp2WVQKCQQzPsBA5TXupDNiDObhEroWJy8VV+hWUq3F5QJo/qOVz+ uHINpbyRvLvp48Ouws1UGRmk4W9VIbzVAhx9DHRW0OFyZL1O5gSVoqcMb4X86Q7L UEtvEM5PxxHz/NauTazY35mLjaYQ5GngHsiW20nIKN4qogxhMf8MPPdY6nOCM52A D3QX7OSCf3GEE6RoRD0uYfGEasze+w3UEIoE2RMkRkfGvHw/h93VRoAdHFd3SQP0 j5RYyaaWHLtn2wk9UvSH0ZJKKcGsHE1fdZBcC93t8yB8+bvpg07OlMpzpSJ/TSYM YrC9bPfox1Uziw== -----END CERTIFICATE-----Generated at Fri Oct 24 19:06:04 2025 by rpki-client